Seedify layer zero

CertiK3 Oct 2024Files named in the report

Audit

CertiK reviewed Seedify (Seedify layer zero) on 3 Oct 2024: 8 findings, 0 critical; 5 marked fixed, 3 open.

No open critical findings

Open the report Open Seedify’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	2	0
Medium	0	0
Low	1	5

LowCommented-Out CodeFixed

An import of `LinearVestingWritable` is commented out within the contract `LzLinearVesting`. Since the import is unused, it can be removed.

LowMissing Emit EventsFixed

The smart contracts contain one or more state changes related to arithmetic operations that do not emit events to communicate the changes outside the blockchain, which can lead to difficulties in tracking or verifying these changes. ```solidity=43 destChainId = _destChainId; ``` ```solidity=44 destChainId = _destChainId; ```

LowMissing or Incomplete NatSpecFixed

Throughout the codebase there are NatSpec comments included for some functions but not all.

LowMissing Zero Address ValidationFixed

There is a missing check that `_lzEndpoint` is not `address(0)` before setting `IDOStorage.layout().refundCaller`. If this state is set to `address(0)`, then function `autoRefund()` will always revert when called in `_nonblockingLzReceive()`.

LowTyposFixed

### LzIDO.sol - In the comment above function `setRefundPeriod()`, word "override" is misspelled as "overide." ### LzLinearVesting.sol - In the comment above the constructor for parameter `_lzEndpoint`, word "endpoint" is misspelled as "ndpoint."